Privacy Policy

This Privacy Policy describes how personal data of visitors to the website at leclatnoir.com (the “Website”) is processed, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1. Data controller

The controller of personal data is Arkadiusz Wdowiak, based at Guadalbullon 10, 41013 Sevilla (Spain), NIE: Y6880566S.

Contact: e-mail oficina@leclatnoir.com, tel. +34 641 16 20 47.

2. What data we process and why

• Contact form — name, e-mail address and message content. Purpose: to respond and handle correspondence, or to take steps at the person's request prior to entering into an agreement.
• Server logs — IP address, date and time, browser and system type. Purpose: security, diagnostics and correct operation of the Website.

3. Legal bases

• Art. 6(1)(b) GDPR — steps taken at the person's request prior to a contract (handling the enquiry);
• Art. 6(1)(a) GDPR — consent (voluntary submission of a message via the form);
• Art. 6(1)(f) GDPR — the controller's legitimate interest (security of the Website, defence of claims, correspondence).

4. Recipients of data

• Hosting provider — LH.pl, where the Website and e-mail are stored;
• Google Ireland Ltd. / Google LLC — in connection with loading web fonts (Google Fonts), which may involve transfer of your IP address;
• Library provider (jsDelivr CDN) — in connection with loading interactive elements (3D graphics).

The external resources above do not store cookies in your browser, but loading them may involve transferring your IP address to the provider.

5. Transfers outside the EEA

Due to the use of Google and CDN services, data (IP address) may be transferred to third countries (including the USA), based on a European Commission adequacy decision (Data Privacy Framework) or standard contractual clauses ensuring an adequate level of protection.

6. Retention period

• form data — until the correspondence ends, and thereafter for the period necessary to defend against possible claims or until consent is withdrawn;
• server logs — for the period resulting from the hosting configuration, usually up to 12 months.

7. Your rights

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

You also have the right to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD), or in Poland, the President of the Personal Data Protection Office (PUODO), depending on the controller's place of establishment.

8. Cookies and local storage

The Website does not use analytics, marketing or tracking cookies. It uses only essential browser local storage to remember that you have seen the privacy notice and your settings (language, sound). Such technologies are essential and do not require separate consent.

9. Automated decision-making

Data is not used for automated decision-making, including profiling.

10. Security

The Website operates over HTTPS and applies technical safeguards (including security headers and protection of the contact form against abuse).

11. Changes

The controller reserves the right to change this Policy. The current version is published on the Website together with the date of update.